Simon Richter I'm not sure I do understand the rationale behind the policy. Forcing users to change their passwords regularly doesn't make anything more secure if somebody has unauthorised access to your old password without your knowledge, they could reapply whatever technique to get your new password, it's likely to be of comparable strength. It leads to more users making physical notes of their passwords, or using systems where the new password is predictable, especially for accounts that are used infrequently.
Better to advise than to enforce, the user should take the responsibility. The majority of people is going to write down their passwords regardless of any expiry policy, and a note that has been merely "lost" is not a reason to change ones password, as the note must be in a safe place, etc.
Forcing people to use a new password every so often will at least invalidate all those passwords on old and forgotten post-its. I really have no understanding of how forcing users to change their passwords is supposed to help.
Do users like to reveal their old passwords after a while? I guess it helps if the attacker wants to lie low for a while before launching an attack, but that seems like a small unlikely gain. Add a comment. Active Oldest Votes. Improve this answer. BoxerBucks BoxerBucks 1, 1 1 gold badge 9 9 silver badges 19 19 bronze badges.
Coops Coops 5, 1 1 gold badge 30 30 silver badges 49 49 bronze badges. Chopper3 Chopper3 Techwrekfix Techwrekfix 1 1 1 bronze badge. Rory Alsop Rory Alsop 1, 11 11 silver badges 20 20 bronze badges. Sign up or log in Sign up using Google. Sign up using Facebook. Sign up using Email and Password. Post as a guest Name. Email Required, but never shown.
Open Command Prompt as administrator in Windows Double-click on the Maximum password age and Minimum password age to change the password expiration time. Articles Windows 10 4 ways to disable or enable Windows 10 password expiration notification. To enable password expiration notification in Windows 10 from Computer Management Follow the steps above to open your user account properties, clear the check box of "Password never expires" , and then click on OK. Way 2: With "netplwiz" To disable Windows 10 password expiration with "netplwiz" 1.
To disable Windows 10 password expiration with cmd 1. Sign in to vote. Windows Server R2 Password expiration is set to 42 days, won't let me change it greyed out. I don't want to have to change the administrator password.
How do I get passed this? Thursday, November 4, PM. Hi, There are several solutions to the problem: 1. Thanks, Guy. Tuesday, June 26, PM. This works for folks that use Windows Server R2 as their standalone, non-domain workstation. Thursday, October 11, AM.
0コメント